Major Description
Parameter values for authorization API call for getContentSummary have changed with fix for HDFS-12130. This causes Ranger authorizer to fail.
Ranger authorizer needs to be updated to accommodate for NameNode changes in authorizing getContentSummary() use-case. Here are the details of the proposed updates:
Ranger authorizer currently constructs the path to authorize from the given INodeAttributes
Ranger authorizer will use the following alternate approach to construct the path - only when checkPermission() is called with single entry arrays for inodes and inodeAttributes parameters, and the given inode has a parent.
– get path to authorize from the given inode by calling getFullPathName()
– if snapshotId != Snapshot.CURRENT_STATE_ID, remove "/.snapshot" from the path obtained from getFullPathName()